CVE-2008-1754

Severity: low (CVSS 1.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-11 · updated 2026-06-16
Weakness: CWE-310

Description

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.

Affected products

Symantec Altiris Deployment Solution: through 6.8; 6.8-sp1, 6.8.380

References

http://secunia.com/advisories/29771
http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
http://www.osvdb.org/44388
http://www.securityfocus.com/bid/28707
http://www.securitytracker.com/id?1019825
http://www.vupen.com/english/advisories/2008/1197/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41771
http://secunia.com/advisories/29771
http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
http://www.osvdb.org/44388
http://www.securityfocus.com/bid/28707
http://www.securitytracker.com/id?1019825

Get alerted when CVE-2008-1754 or the next vulnerability affects your stack